Re: 404 After Setting session.save_path to /tmp
| From: | Mark Sargent | Date: | Wed, 17 May 2006 04:22:27 +0000 |
| Subject: | Re: 404 After Setting session.save_path to /tmp | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-236318@lists.php.net to get a copy of this message | ||
Jochem Maas wrote:
NO - DONT EVER DO THIS!!!! tmp/session files should not be stored in a directory that can be [potentially] read via http. .htaccess directives can be used to block access to the dir BUT I still would recommend keeping 'tmp' outside of the web root. just make sure 'tmp' is writable by the user the webserver is running as. Hi All,thanx. How do I determine what user httpd is running as? Cheers. Mark Sargent